Lucene search
HistoryNov 06, 2008 - 3:55 p.m.
CVE-2008-4964
cve-2008-4964
local users
symlink attack
konwert 1.8
file deletion
nvd
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file.
Affected configurations
Node
krzysztof_kozlowskikonwertMatch1.8
| CPE | Name | Operator | Version |
|---|---|---|---|
| krzysztof_kozlowski:konwert | krzysztof kozlowski konwert | eq | 1.8 |
Related
cvelist
cvelist
CVE-2008-4964
2008-11-06 11:00:00
nvd
nvd
CVE-2008-4964
2008-11-06 15:55:51
ubuntucve
ubuntucve
CVE-2008-4964
2008-11-06 00:00:00
prion
prion
Arbitrary file deletion
2008-11-06 15:55:00
debiancve
debiancve
CVE-2008-4964
2008-11-06 15:55:51
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2008-4964